PT-2026-53214

Name of the Vulnerable Software and Affected Versions Wavlink WL-NU516U1-A version M16U1 V240425 Description A stack-based buffer overflow occurs in the POST Parameter Handler component when processing the Guest ssid argument. This issue exists within the sub 407504 function of the...

CVE-2025-9149

CVE-2025-9149 affects Wavlink WL-NU516U1 M16U1_V240425. The vulnerability is in the function sub_4032E4 of the file /cgi-bin/wireless.cgi, where manipulation of the argument Guest_ssid enables command injection. The issue is exploitable remotely, and public exploit details (PoC) have been disclos...

PT-2025-33820

Name of the Vulnerable Software and Affected Versions: Wavlink WL-NU516U1 M16U1 V240425 Description: A vulnerability exists due to command injection. The issue is located in the /cgi-bin/wireless.cgi file and impacts the sub 4032E4 function. Manipulation of the Guest ssid argument can lead to...